CVE-2016-10552
Resources Downloaded over Insecure Protocol in igniteui
CVE-2016-10552 is a high vulnerability (CVSS 7.4) in Infragistics Igniteui, published May 31, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.52%, the 44th percentile. No source names a fixed version.
- Severity
- 7.4 HighCVSS 3.0, NVD
- Exploit chance
- 0.52%EPSS, 44th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
igniteuinpm | through 0.0.5 | None known |
What each source reports
NVD Score used
igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.
- Record
CVE-2016-10552- CVSS 3.0
- 7.4 High
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Weakness
- CWE-311, CWE-254
- Updated
- 2026-11-02
CVE ListNo score
igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.
- Record
CVE-2016-10552- Weakness
- CWE-311
- Updated
- 2026-11-02
EUVDEUVD-2019-0203No score
igniteui 0.0.5 and earlier downloads JavaScript and CSS resources over insecure protocol.
- Record
EUVD-2019-0203- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2r5h-gh4x-8hp9No score
Resources Downloaded over Insecure Protocol in igniteui
Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection.
Recommendation
The igniteui package has been deprecated by the package author and now exists under ignite-ui, which should be used in place of this package.
- Record
GHSA-2r5h-gh4x-8hp9- Weakness
- CWE-311
- Updated
- 2026-11-02
OSVGHSA-2r5h-gh4x-8hp9No score
Resources Downloaded over Insecure Protocol in igniteui
Affected versions of igniteui download Javascript and CSS resources over an unencrypted HTTP connection. An attacker with a privileged network position can intercept and view or modify any content sent or recieved over an unencrypted HTTP connection.
Recommendation
The igniteui package has been deprecated by the package author and now exists under ignite-ui, which should be used in place of this package.
- Record
GHSA-2r5h-gh4x-8hp9- Weakness
- CWE-311
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.